Calculating setting is always the smartest idea. I also have a WIFI6 NIC with me, the problem is it is not supported by Linux 4.19. which we currently are forced to use.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
Dec 2 2020
It seems related to this patch https://github.com/vyos/vyos-1x/commit/b39d623170377b2e99fd7e88b627afea71e4d00c#diff-e4557e4a7b41f0e9328ac0e7d7c0305416f0f1e42d46af27c2135ca976434fce
Appears only if you have 2 or more lldp neighbors.
Cool let me know if you still need my config
Ok, with cisco device and added vif 1 I can reproduce this issue
vyos@vyos# run show lldp neighbors Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/lldp_op.py", line 121, in <module> config_text = tmpl.render(parse_data(neighbors)) File "/usr/libexec/vyos/op_mode/lldp_op.py", line 50, in parse_data for local_if, values in data.items(): AttributeError: 'list' object has no attribute 'items'
I still can't reproduce this issue.
vyos@vyos:~$ show configuration commands | match lldp set service lldp interface eth1 set service lldp legacy-protocols cdp set service lldp management-address '192.168.255.31' set service lldp snmp enable vyos@vyos:~$ show lldp neighbors Capability Codes: R - Router, B - Bridge, W - Wlan r - Repeater, S - Station D - Docsis, T - Telephone, O - Other
It looks like the issue is CDP. If I remove the CDP piece of the config then it works.
I just upgraded to the absolute latest rolling release that came out early this morning and it has the same issue.
As far as I know, you only need to work in the vyos-1x repo
I just tried the show lldp neighbors again and it doesn't work but sudo lldpcli show neighbors works
mlaney@vyos:~$ sudo lldpcli show neighbors
LLDP neighbors:
Interface: eth1, via: CDPv2, RID: 1, Time: 0 day, 08:19:01
Chassis: ChassisID: local Cisco-Sw1.local SysName: Cisco-Sw1.local SysDescr: cisco WS-C2960S-48LPS-L running on Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 15.2(2)E9, RELEASE SOFTWARE (fc4) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2018 by Cisco Systems, Inc. Compiled Sat 08-Sep-18 14:56 by prod_rel_team MgmtIP: 10.22.87.254 Capability: Bridge, on Port: PortID: ifname GigabitEthernet1/0/9 PortDescr: GigabitEthernet1/0/9 TTL: 180
Interface: eth1, via: CDPv2, RID: 1, Time: 0 day, 08:18:47
Chassis: ChassisID: local Cisco-Sw1.local SysName: Cisco-Sw1.local SysDescr: cisco WS-C2960S-48LPS-L running on Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 15.2(2)E9, RELEASE SOFTWARE (fc4) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2018 by Cisco Systems, Inc. Compiled Sat 08-Sep-18 14:56 by prod_rel_team
Here is my lldp config. ETH0 is WAN ETH1 is lan that is why only eth1 has lldp enabled.
maybe it happened after that commit https://github.com/vyos/vyos-1x/commit/c87ad948999c28c3c9449f98d60b545481ea29d5
because it was work in VyOS 1.3-rolling-202011250217
Hi, guys, I found an interesting script in frrouter's github repo. In fact, this is purely because someone wrote a script and submitted the following bug report:
@thadrumr please provide your lldp configuration. show configuration commands | match lldp
I can't reproduce this issue in lab with the latest rolling. Provide please detailed reproducing steps, also will be helpful to get an output
sudo lldpcli show neighbors
Does this mean to to disallow installing the syslinux bootloader to the iso by default? The reason for asking is the arm builds we try to make, as syslinux is incompatible with arm, and a iso cant be generated for such a system as it tries to install syslinux when building the image.
LiveCD is usually only used for temporary testing and installation, isn't it? Will using this restriction cause the normal use of livecd to become troublesome?
I think the intention here is by default build with no liveCD support, and use the flag to explicitly build liveCD images when needed. The justification is if an image is cloud type image, there are certain security assumptions about the live network the image is connected to (because many cloud providers provision an image via information over specific link local addresses). If you boot a physical PC with a cloud ISO, you run the risk of exposing cloud-init to the local network, which would allow trivial takeover.
Dec 1 2020
table ip nat { chain PREROUTING { type nat hook prerouting priority dstnat; policy accept; iifname "eth1" tcp dport { 22 } counter packets 0 bytes 0 dnat to 192.168.1.4 comment "DST-NAT-100" } }
Thank you @Dmitry, it will be in tomorrows rolling release.
I am a little confused. What is the specific function of the --allow-cd-boot compilation parameter that this task hopes to add? Forgive me for not seeming to understand!
Perhaps replace config (from_re "interface" | from_re "isis *") delete also and route-maps/prefix-lists from FRR configuration.
https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/protocols_isis.py#L121
Before update
Nov 30 2020
Ah, thanks for the clarification.
@c-po It's mean all NOT ports. If you want to drop not 22,23,24,25
This will be on my list to test here in a little bit. I'm almost done with stuff relating to LDP.
PR with changed types in docs https://github.com/vyos/vyos-documentation/pull/380
ESP transport mode works properly on Cisco Router and VyOS routers together.
DMVPN Spokes work properly behind a NAT if we use transport mode instead of tunnel. e.g.
set vpn ipsec esp-group ESP-HUB mode transport
So I think we need to add this info to docs.vyos.io and close this Feature Request
Nov 29 2020
Put in a new PR to enable ethernet sub interface MPLS enablement. I screwed up the first one...but here's hoping this one is good.
See documentation https://docs.vyos.io/en/latest/system/ntp.html, support will be in next rolling release
Even on Kernel 5.4 this is not supported.
Nov 28 2020
The command works on the experimental Kernel 5.9.9 VyOS ISO, but not using a 4.19 series Kernel. looks like it's not yet supported in nftables.
We actually need this:
http://git.nftables.org/nftables/commit/?id=35a6b10c1bc488ca195e9c641563c29251f725f3
Fixed.
Fixed
set nat source rule 1000 outbound-interface 'eth1' set nat source rule 1000 source address '203.0.113.1-203.0.113.4' set nat source rule 1000 translation address '10.0.0.1-10.0.0.4' vyos@r5# commit [ nat ] Warning: IP address 10.0.0.1 does not exist on the system! Warning: IP address 10.0.0.4 does not exist on the system!
@jjakob can you check the latest rolling?
Nov 27 2020
The root cause here is that there is yet no nftables map support in our template.
This one is holding us back from some great 1.3 features... would love to get it looked at!